CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging security teams to immediately patch a vulnerability in Ivanti Connect Secure (ICS) that has been exploited in zero-day attacks since at least October 1st.
According to the reporting, the flaw affects Ivanti Connect Secure deployments, and the exploitation activity has been ongoing for an extended period, making prompt patching critical for organizations relying on the product for remote access.
Administrators should take the following steps:
- Apply the available fix for the affected Ivanti Connect Secure flaw as soon as possible.
- Prioritize internet-facing ICS appliances, since these are the likely targets of the ongoing exploitation.
- Monitor for signs of compromise tied to the vulnerability, especially on systems that may have been exposed since early October.
- Review vendor guidance and CISA advisories for any additional detection or mitigation details.
Given that exploitation has reportedly been underway since at least October 1st, any organization running Ivanti Connect Secure should treat this as urgent rather than routine patching.
Source: BleepingComputer
Has your organization already applied the Ivanti Connect Secure patch, or are you still working through the remediation process?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login